jjj
kkk
xxx
Behavioral task
behavioral1
Sample
103c1669fcff8f85d5fcf811da94c00b_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
103c1669fcff8f85d5fcf811da94c00b_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
103c1669fcff8f85d5fcf811da94c00b_JaffaCakes118
Size
10KB
MD5
103c1669fcff8f85d5fcf811da94c00b
SHA1
7dad8e072ab92f722d00d19d00ac53ce6b106e41
SHA256
f8658f7eea8041d6bfee22318ad99c463c0b93dac800b5e34ea7b6d1387807fe
SHA512
7f7eb35a28b0bf888c449809cd5c56e0cf26bcf60b01fc416804a2799674e43480bed81fe3bcb9e6563e6e3c11d12bfc9b015a876eb02f516de1e3b55cf4fbe6
SSDEEP
192:lveoS5oK16fbTuJaxmJ2dGLf4x+r/lzzhRUNUYN3AmD6:7S5TJakgGsxulzzhRSUYN3AS6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
103c1669fcff8f85d5fcf811da94c00b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jjj
kkk
xxx
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ